codymaster 5.2.0 → 7.0.0

package/scripts/postinstall.js

@@ -1,298 +1,65 @@
 #!/usr/bin/env node
+/**
+ * CodyMaster postinstall — minimal, friendly, no surprise actions.
+ * The actual platform install runs through `cm` (the onboarding wizard) so
+ * users always opt in interactively.
+ */
+
+const fs = require('fs');
+const path = require('path');
 
-const G = '\x1b[32m';
 const C = '\x1b[36m';
-const W = '\x1b[37m';
+const G = '\x1b[32m';
 const O = '\x1b[33m';
-const Y = '\x1b[1;33m';
-const BOLD = '\x1b[1m';
+const W = '\x1b[1;37m';
 const DIM = '\x1b[2m';
 const NC = '\x1b[0m';
 
-const fs = require('fs');
-const path = require('path');
-const { execSync, execFileSync } = require('child_process');
-
-let skillCount = 68;
+let skillCount = 60;
 try {
   const skillsDir = path.join(__dirname, '..', 'skills');
   if (fs.existsSync(skillsDir)) {
-    skillCount = fs.readdirSync(skillsDir)
-      .filter(f => {
-        const fullPath = path.join(skillsDir, f);
-        return f.startsWith('cm-') && fs.statSync(fullPath).isDirectory() && fs.existsSync(path.join(fullPath, 'SKILL.md'));
-      })
-      .length;
-  }
-} catch (e) {}
-
-
-// Simple check for Vietnamese environment for the CORE UI
-const isVi = Intl.DateTimeFormat().resolvedOptions().locale.startsWith('vi');
-
-const sentiments = {
-  start: [
-    "🐹: Whiskers twitching... CodyMaster incoming!",
-    `🐹: Let's fill these cheeks with ${skillCount} skills! ✨`,
-    "🐹: Waking up from a power nap! Let's build! 🐭"
-  ],
-  progress: [
-    "🐹: Sniffing out your AI agents...",
-    "🐹: Running on the wheel to speed this up! 🏃💨",
-    "🐹: Found a skill! Stashing it in my pocket... 💎"
-  ],
-  finish: [
-    "🐹: Mission accomplished! Can I have a walnut now? 🥜",
-    `🐹: My cheeks are stuffed with ${skillCount} skills for you! ✨`,
-    "🐹: Terminal is Hamster-approved! Better than a wheel! 🎡",
-    `🐹: ${skillCount} skills stored. I'm ready for vibe coding! ⚡`
-  ]
-};
-
-const getSentiment = (state) => {
-  const list = sentiments[state];
-  return `    ${C}${list[Math.floor(Math.random() * list.length)]}${NC}`;
-};
-
-const showSkillGuide = (choice) => {
-  console.clear();
-  console.log(`     ${G}\\${NC} ${O}( \\_/ )${NC} ${G}/${NC}`);
-  console.log(`    ${G}\\${NC} ${O}(${NC} ${G}^ u ^${NC} ${O})${NC} ${G}/${NC}`);
-  console.log(`   ${G}--${NC} ${O}(  ___  )${NC} ${G}--${NC}`);
-  console.log('');
-  
-  if (isVi) {
-    switch(choice) {
-      case '1':
-        console.log(`${Y}${BOLD}1. Hướng dẫn toàn tập${NC} (${C}cm-how-it-work${NC})`);
-        console.log(`${BOLD}🎯 Tình huống:${NC} Bạn mới cài CodyMaster và chưa biết bắt đầu từ đâu.`);
-        console.log(`${BOLD}🚀 Câu lệnh:${NC} \`cm @/cm-how-it-work\``);
-        console.log(`${BOLD}💡 Thử copy prompt này:${NC} "Giải thích quy trình từ ý tưởng đến lúc deploy một ứng dụng web bằng bộ skill này."`);
-        break;
-      case '2':
-        console.log(`${Y}${BOLD}2. Vibe Coding (Zero Code)${NC} (${C}cm-start${NC})`);
-        console.log(`${BOLD}🎯 Tình huống:${NC} Bạn có ý tưởng nhưng lười gõ từng dòng code.`);
-        console.log(`${BOLD}🚀 Câu lệnh:${NC} \`cm @/cm-start\``);
-        console.log(`${BOLD}💡 Thử copy prompt này:${NC} "Tôi muốn làm một trang web bán cà phê có giỏ hàng, dùng Tailwind CSS."`);
-        break;
-      case '3':
-        console.log(`${Y}${BOLD}3. Tham gia dự án có sẵn${NC} (${C}cm-brainstorm-idea${NC})`);
-        console.log(`${BOLD}🎯 Tình huống:${NC} Bạn nhảy vào một dự án có sẵn và thấy code quá rắc rối.`);
-        console.log(`${BOLD}🚀 Câu lệnh:${NC} \`cm @/cm-brainstorm-idea\``);
-        console.log(`${BOLD}💡 Thử copy prompt này:${NC} "Đọc toàn bộ project này và chỉ cho tôi 3 điểm yếu lớn nhất cần cải thiện ngay."`);
-        break;
-      case '4':
-        console.log(`${Y}${BOLD}4. Thiết kế giao diện (UX/UI)${NC} (${C}cm-ux-master / cm-ui-preview${NC})`);
-        console.log(`${BOLD}🎯 Tình huống:${NC} Bạn muốn web của mình đẹp như Apple hay Linear.`);
-        console.log(`${BOLD}🚀 Câu lệnh:${NC} \`cm @/cm-ux-master\``);
-        console.log(`${BOLD}💡 Thử copy prompt này:${NC} "Lấy style từ trang stripe.com và thiết kế cho tôi một trang thanh toán cực sang."`);
-        break;
-      case '5':
-        console.log(`${Y}${BOLD}5. Lập trình TDD & Pair code${NC} (${C}cm-tdd${NC})`);
-        console.log(`${BOLD}🎯 Tình huống:${NC} Bạn muốn code chắc chắn, không có lỗi khi chạy production.`);
-        console.log(`${BOLD}🚀 Câu lệnh:${NC} \`cm @/cm-tdd\``);
-        console.log(`${BOLD}💡 Thử copy prompt này:${NC} "Viết test case trước, sau đó code chức năng đăng ký người dùng cho tôi."`);
-        break;
-      case '6':
-        console.log(`${Y}${BOLD}6. Dọn dẹp & Tái cấu trúc${NC} (${C}cm-clean-code${NC})`);
-        console.log(`${BOLD}🎯 Tình huống:${NC} Code chạy được nhưng nhìn như "bãi rác".`);
-        console.log(`${BOLD}🚀 Câu lệnh:${NC} \`cm @/cm-clean-code\``);
-        console.log(`${BOLD}💡 Thử copy prompt này:${NC} "Tối ưu lại file này: xóa code thừa, đặt lại tên biến cho chuẩn và dễ hiểu hơn."`);
-        break;
-      case '7':
-        console.log(`${Y}${BOLD}7. Quét & Sửa lỗi bảo mật${NC} (${C}cm-security-gate${NC})`);
-        console.log(`${BOLD}🎯 Tình huống:${NC} Sợ lộ API key hoặc web bị hack XSS.`);
-        console.log(`${BOLD}🚀 Câu lệnh:${NC} \`cm @/cm-security-gate\``);
-        console.log(`${BOLD}💡 Thử copy prompt này:${NC} "Kiểm tra xem project có lỗ hổng bảo mật nào không trước khi tôi push lên GitHub."`);
-        break;
-      case '8':
-        console.log(`${Y}${BOLD}8. Viết tài liệu Docs & API${NC} (${C}cm-dockit${NC})`);
-        console.log(`${BOLD}🎯 Tình huống:${NC} Lười viết tài liệu hướng dẫn cho đồng nghiệp hoặc khách hàng.`);
-        console.log(`${BOLD}🚀 Câu lệnh:${NC} \`cm @/cm-dockit\``);
-        console.log(`${BOLD}💡 Thử copy prompt này:${NC} "Tự động tạo file hướng dẫn sử dụng (README) cho toàn bộ project này."`);
-        break;
-      case '9':
-        console.log(`${Y}${BOLD}9. Tạo WOW Landing Page${NC} (${C}cm-cro-methodology${NC})`);
-        console.log(`${BOLD}🎯 Tình huống:${NC} Web có người vào nhưng không ai mua hàng/đăng ký.`);
-        console.log(`${BOLD}🚀 Câu lệnh:${NC} \`cm @/cm-cro-methodology\``);
-        console.log(`${BOLD}💡 Thử copy prompt này:${NC} "Phân tích trang web này và chỉ cách tăng gấp đôi tỷ lệ khách hàng đăng ký."`);
-        break;
-      case '10':
-        console.log(`${Y}${BOLD}10. Bảng theo dõi tiến độ${NC} (${C}cm dashboard${NC})`);
-        console.log(`${BOLD}🎯 Tình huống:${NC} Muốn biết mình đã làm được bao nhiêu % công việc rồi.`);
-        console.log(`${BOLD}🚀 Câu lệnh:${NC} \`cm dashboard\``);
-        console.log(`${BOLD}💡 Thử copy prompt này:${NC} "Hiện bảng dashboard để tôi xem tiến độ các task hiện tại."`);
-        break;
-      case '11':
-        console.log(`${Y}${BOLD}11. Xem Demo (Claude Code)${NC} (${C}/cm:demo${NC})`);
-        console.log(`${BOLD}🎯 Tình huống:${NC} Muốn xem CodyMaster tự "múa" code như thế nào.`);
-        console.log(`${BOLD}🚀 Câu lệnh:${NC} \`/cm:demo\``);
-        console.log(`${BOLD}💡 Thử copy prompt này:${NC} "Bắt đầu demo: tự tạo một ứng dụng TodoList từ A-Z trong 1 phút."`);
-        break;
-      case '12':
-        console.log(`${Y}${BOLD}12. Trợ giúp & Cú pháp lệnh${NC} (${C}cm help${NC})`);
-        console.log(`${BOLD}🎯 Tình huống:${NC} Quên lệnh hoặc muốn tìm thêm skill xịn khác.`);
-        console.log(`${BOLD}🚀 Câu lệnh:${NC} \`cm help\``);
-        console.log(`${BOLD}💡 Thử copy prompt này:${NC} "Liệt kê các skill liên quan đến Growth Hacking và Marketing."`);
-        break;
-    }
-  } else {
-    switch(choice) {
-      case '1':
-        console.log(`${Y}${BOLD}1. The Ultimate Guide${NC} (${C}cm-how-it-work${NC})`);
-        console.log(`${BOLD}🎯 Situation:${NC} You just installed CodyMaster and don't know where to start.`);
-        console.log(`${BOLD}🚀 Command:${NC} \`cm @/cm-how-it-work\``);
-        console.log(`${BOLD}💡 Try this prompt:${NC} "Explain the process from idea to deployment using this skill kit."`);
-        break;
-      case '2':
-        console.log(`${Y}${BOLD}2. Vibe Coding (Zero Code)${NC} (${C}cm-start${NC})`);
-        console.log(`${BOLD}🎯 Situation:${NC} You have an idea but are too lazy to write code manually.`);
-        console.log(`${BOLD}🚀 Command:${NC} \`cm @/cm-start\``);
-        console.log(`${BOLD}💡 Try this prompt:${NC} "Build a coffee shop website with a cart using Tailwind CSS."`);
-        break;
-      case '3':
-        console.log(`${Y}${BOLD}3. Code an Existing Project${NC} (${C}cm-brainstorm-idea${NC})`);
-        console.log(`${BOLD}🎯 Situation:${NC} You're joining an existing project and the code is a mess.`);
-        console.log(`${BOLD}🚀 Command:${NC} \`cm @/cm-brainstorm-idea\``);
-        console.log(`${BOLD}💡 Try this prompt:${NC} "Read this entire project and tell me the 3 biggest weaknesses."`);
-        break;
-      case '4':
-        console.log(`${Y}${BOLD}4. Generate UX/UI Designs${NC} (${C}cm-ux-master / cm-ui-preview${NC})`);
-        console.log(`${BOLD}🎯 Situation:${NC} You want your web app to look as premium as Apple or Linear.`);
-        console.log(`${BOLD}🚀 Command:${NC} \`cm @/cm-ux-master\``);
-        console.log(`${BOLD}💡 Try this prompt:${NC} "Copy the style from stripe.com and design a high-end checkout page."`);
-        break;
-      case '5':
-        console.log(`${Y}${BOLD}5. Code TDD & Pair Coding${NC} (${C}cm-tdd${NC})`);
-        console.log(`${BOLD}🎯 Situation:${NC} You want reliable code that doesn't break in production.`);
-        console.log(`${BOLD}🚀 Command:${NC} \`cm @/cm-tdd\``);
-        console.log(`${BOLD}💡 Try this prompt:${NC} "Write test cases first, then implement user registration for me."`);
-        break;
-      case '6':
-        console.log(`${Y}${BOLD}6. Clean & Refactor Codebase${NC} (${C}cm-clean-code${NC})`);
-        console.log(`${BOLD}🎯 Situation:${NC} The code works but it looks like a "garbage dump".`);
-        console.log(`${BOLD}🚀 Command:${NC} \`cm @/cm-clean-code\``);
-        console.log(`${BOLD}💡 Try this prompt:${NC} "Optimize this file: remove dead code and rename variables for clarity."`);
-        break;
-      case '7':
-        console.log(`${Y}${BOLD}7. Scan for Vulnerabilities${NC} (${C}cm-security-gate${NC})`);
-        console.log(`${BOLD}🎯 Situation:${NC} Worried about leaking API keys or XSS hacks.`);
-        console.log(`${BOLD}🚀 Command:${NC} \`cm @/cm-security-gate\``);
-        console.log(`${BOLD}💡 Try this prompt:${NC} "Check if there are any security vulnerabilities before I push to GitHub."`);
-        break;
-      case '8':
-        console.log(`${Y}${BOLD}8. Write Docs & Generate APIs${NC} (${C}cm-dockit${NC})`);
-        console.log(`${BOLD}🎯 Situation:${NC} Lazy to write documentation for teammates or clients.`);
-        console.log(`${BOLD}🚀 Command:${NC} \`cm @/cm-dockit\``);
-        console.log(`${BOLD}💡 Try this prompt:${NC} "Automatically generate a README guide for this entire project."`);
-        break;
-      case '9':
-        console.log(`${Y}${BOLD}9. Release WOW Landing Page${NC} (${C}cm-cro-methodology${NC})`);
-        console.log(`${BOLD}🎯 Situation:${NC} Visitors come to your site but don't buy or sign up.`);
-        console.log(`${BOLD}🚀 Command:${NC} \`cm @/cm-cro-methodology\``);
-        console.log(`${BOLD}💡 Try this prompt:${NC} "Analyze this website and show me how to double my sign-up rate."`);
-        break;
-      case '10':
-        console.log(`${Y}${BOLD}10. Open Progress Dashboard${NC} (${C}cm dashboard${NC})`);
-        console.log(`${BOLD}🎯 Situation:${NC} Want to know how much work is actually completed.`);
-        console.log(`${BOLD}🚀 Command:${NC} \`cm dashboard\``);
-        console.log(`${BOLD}💡 Try this prompt:${NC} "Show the dashboard so I can see the progress of current tasks."`);
-        break;
-      case '11':
-        console.log(`${Y}${BOLD}11. See an Interactive Demo${NC} (${C}/cm:demo${NC})`);
-        console.log(`${BOLD}🎯 Situation:${NC} Want to see CodyMaster perform its magic automatically.`);
-        console.log(`${BOLD}🚀 Command:${NC} \`/cm:demo\``);
-        console.log(`${BOLD}💡 Try this prompt:${NC} "Start demo: build a TodoList app from scratch in 1 minute."`);
-        break;
-      case '12':
-        console.log(`${Y}${BOLD}12. Help & Command List${NC} (${C}cm help${NC})`);
-        console.log(`${BOLD}🎯 Situation:${NC} Forgot a command or looking for more cool skills.`);
-        console.log(`${BOLD}🚀 Command:${NC} \`cm help\``);
-        console.log(`${BOLD}💡 Try this prompt:${NC} "List all skills related to Growth Hacking and Marketing."`);
-        break;
-    }
+    skillCount = fs
+      .readdirSync(skillsDir)
+      .filter((f) => {
+        const full = path.join(skillsDir, f);
+        return (
+          f.startsWith('cm-') &&
+          fs.statSync(full).isDirectory() &&
+          fs.existsSync(path.join(full, 'SKILL.md'))
+        );
+      }).length;
   }
-
-  console.log('');
-};
-
-const printMenu = () => {
-  console.clear();
-  console.log(`     ${G}\\${NC} ${O}( \\_/ )${NC} ${G}/${NC}`);
-  console.log(`    ${G}\\${NC} ${O}(${NC} ${G}^ u ^${NC} ${O})${NC} ${G}/${NC}`);
-  console.log(`   ${G}--${NC} ${O}(  ___  )${NC} ${G}--${NC}    ${G}${BOLD}${isVi ? '✅ Hoàn tất!' : '✅ Done!'}${NC}`);
-  console.log(`    ${O}| [     ] |${NC}`);
-  console.log(`     ${O}'--w-w--'${NC}`);
-  console.log('');
-  
-  if (isVi) {
-    console.log(`    ${W}${BOLD}🎉 Thành công! Bạn đã mở khóa ${skillCount} kỹ năng AI toàn năng:${NC}`);
-  } else {
-    console.log(`    ${W}${BOLD}🎉 Success! You just unlocked ${skillCount} omnipotent AI skills:${NC}`);
-  }
-  
-  console.log('');
-  console.log(getSentiment('finish'));
-  console.log('');
-  
-  if (isVi) {
-    console.log(`  ${C}🎯 Orchestration${NC} : Lên kế hoạch & Điều phối Agent`);
-    console.log(`  ${C}🎨 Product${NC}       : Thiết kế UX/UI & Tâm lý hành vi`);
-    console.log(`  ${C}🔧 Engineering${NC}   : Code Full-stack & Tái cấu trúc`);
-    console.log(`  ${C}🔒 Security${NC}      : Bảo mật tự động & Chống rò rỉ`);
-    console.log(`  ${C}⚙️ Operations${NC}    : Triển khai an toàn & Quản lý CI/CD`);
-    console.log(`  ${C}📈 Growth${NC}        : Tối ưu chuyển đổi (CRO) & Tracking`);
-    console.log('');
-    console.log(`    ${W}${BOLD}🌟 Lệnh phổ biến:${NC}`);
-    console.log('');
-    console.log(`   🔸 ${Y}Bảng tiến độ (Dashboard)    ${NC} → cm dashboard`);
-    console.log(`   🔸 ${Y}Cần trợ giúp / Tìm kỹ năng    ${NC} → cm help`);
-    console.log(`   🔸 ${Y}Cách CodyMaster hoạt động  ${NC} → cm-how-it-work`);
-  } else {
-    console.log(`  ${C}🎯 Orchestration${NC} : Task Planning & Agent Synergy`);
-    console.log(`  ${C}🎨 Product${NC}       : UX/UI Mastery & User Psychology`);
-    console.log(`  ${C}🔧 Engineering${NC}   : Full-stack TDD & Refactoring`);
-    console.log(`  ${C}🔒 Security${NC}      : Automated Gates & Secret Shields`);
-    console.log(`  ${C}⚙️ Operations${NC}    : Safe Deployments & CI/CD Excellence`);
-    console.log(`  ${C}📈 Growth${NC}        : Conversion Tracking & Hacks`);
-    console.log('');
-    console.log(`    ${W}${BOLD}🌟 Popular Commands:${NC}`);
-    console.log('');
-    console.log(`   🔸 ${Y}Open progress dashboard    ${NC} → cm dashboard`);
-    console.log(`   🔸 ${Y}Help & Command list        ${NC} → cm help`);
-    console.log(`   🔸 ${Y}The ultimate guide         ${NC} → cm-how-it-work`);
-  }
-  
-  console.log('');
-  console.log(`    ${W}${BOLD}${isVi ? '📚 Tài liệu:' : '📚 Documentation:'}${NC} ${C}https://cody.todyle.com/docs${NC}`);
-  console.log('');
-};
-
-const isInstalledAsNpmDependency = () => {
-  const root = path.resolve(__dirname, '..').replace(/\\/g, '/');
-  return /[/\\]node_modules[/\\]codymaster$/i.test(root);
-};
-
-const npmCmd = () => (process.platform === 'win32' ? 'npm.cmd' : 'npm');
-
-const activateCli = () => {
-  const pkgRoot = path.join(__dirname, '..');
-
-  if (isInstalledAsNpmDependency()) {
-    console.log(`  ${C}CodyMaster CLI (per-project install — official path):${NC}`);
-    console.log(`    ${W}npx cm${NC}   or   ${W}npx codymaster${NC}`);
-    console.log(
-      `  ${DIM}Optional — bare ${W}cm${DIM} in any terminal: ${W}npm install -g codymaster${NC}`,
-    );
-    return;
-  }
-
-
-};
-
-const main = () => {
-  activateCli();
-  printMenu();
-};
-
-main();
+} catch {}
+
+const sentiments = [
+  `🐹: ${skillCount} skills stuffed in my cheeks. Ready when you are! ✨`,
+  `🐹: Whiskers twitching — type ${W}cm${NC}${C} to start the wizard.`,
+  '🐹: Power-nap over. Let\'s build! 🐭',
+];
+const pick = (arr) => arr[Math.floor(Math.random() * arr.length)];
+
+const isGlobal =
+  process.env.npm_config_global === 'true' ||
+  /[/\\]npm[/\\]node_modules[/\\]codymaster$/i.test(path.resolve(__dirname, '..').replace(/\\/g, '/'));
+
+console.log('');
+console.log(`     ${G}\\${NC} ${O}( \\_/ )${NC} ${G}/${NC}`);
+console.log(`    ${G}\\${NC} ${O}(${NC} ${G}^ u ^${NC} ${O})${NC} ${G}/${NC}`);
+console.log(`   ${G}--${NC} ${O}(  ___  )${NC} ${G}--${NC}    ${G}${W}CodyMaster ready${NC}`);
+console.log(`    ${O}| [     ] |${NC}`);
+console.log(`     ${O}'--w-w--'${NC}`);
+console.log('');
+console.log(`    ${C}${pick(sentiments)}${NC}`);
+console.log('');
+
+if (isGlobal) {
+  console.log(`    Next: run  ${W}cm${NC}  to start the onboarding wizard.`);
+  console.log(`    ${DIM}It will detect your AI coding tools and install skills where you choose.${NC}`);
+} else {
+  console.log(`    Next: run  ${W}npx cm${NC}  inside this project to start the wizard.`);
+  console.log(`    ${DIM}For a global \`cm\` command:  ${W}npm install -g codymaster${NC}${DIM}.${NC}`);
+}
+console.log('');
+console.log(`    ${DIM}Docs: https://cody.todyle.com/docs${NC}`);
+console.log('');

package/scripts/update-changelog.sh

@@ -0,0 +1,88 @@
+#!/bin/bash
+# update-changelog.sh — Auto-update CHANGELOG.md from git commits
+#
+# Usage:
+#   bash scripts/update-changelog.sh          # Update CHANGELOG.md
+#   bash scripts/update-changelog.sh --dry-run # Preview without writing
+#
+# Follows conventional commits format:
+#   feat: → 🚀 Features
+#   fix: → 🐛 Bug Fixes
+#   security: → 🔒 Security
+#   improve/refactor/perf: → 🚀 Improvements
+
+set -e
+
+REPO_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+CHANGELOG="$REPO_ROOT/CHANGELOG.md"
+DRY_RUN=false
+
+if [[ "$1" == "--dry-run" ]]; then
+  DRY_RUN=true
+fi
+
+# Get last tag
+LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+
+# Get commits since last tag
+if [ -z "$LAST_TAG" ]; then
+  COMMITS=$(git log --oneline -20 --no-merges)
+else
+  COMMITS=$(git log --oneline "$LAST_TAG"..HEAD --no-merges)
+fi
+
+if [ -z "$COMMITS" ]; then
+  echo "No commits found since last tag."
+  exit 0
+fi
+
+# Categorize commits
+FEATURES=$(echo "$COMMITS" | grep -iE "^[a-f0-9]+ feat:" | sed 's/^[a-f0-9]* /- /' || true)
+FIXES=$(echo "$COMMITS" | grep -iE "^[a-f0-9]+ fix:" | sed 's/^[a-f0-9]* /- /' || true)
+SECURITY=$(echo "$COMMITS" | grep -iE "^[a-f0-9]+ (security|sec):" | sed 's/^[a-f0-9]* /- /' || true)
+IMPROVEMENTS=$(echo "$COMMITS" | grep -iE "^[a-f0-9]+ (improve|refactor|perf):" | sed 's/^[a-f0-9]* /- /' || true)
+OTHER=$(echo "$COMMITS" | grep -ivE "^[a-f0-9]+ (feat|fix|security|sec|improve|refactor|perf):" | sed 's/^[a-f0-9]* /- /' || true)
+
+# Generate changelog entry
+DATE=$(date +%Y-%m-%d)
+VERSION=$(node -p "require('$REPO_ROOT/package.json').version" 2>/dev/null || echo "unreleased")
+
+ENTRY="## [$VERSION] - $DATE\n\n"
+
+if [ -n "$FEATURES" ]; then
+  ENTRY+="### 🚀 Features\n$FEATURES\n\n"
+fi
+
+if [ -n "$FIXES" ]; then
+  ENTRY+="### 🐛 Bug Fixes\n$FIXES\n\n"
+fi
+
+if [ -n "$SECURITY" ]; then
+  ENTRY+="### 🔒 Security\n$SECURITY\n\n"
+fi
+
+if [ -n "$IMPROVEMENTS" ]; then
+  ENTRY+="### 🚀 Improvements\n$IMPROVEMENTS\n\n"
+fi
+
+if [ -n "$OTHER" ]; then
+  ENTRY+="### 📦 Other\n$OTHER\n\n"
+fi
+
+if [ "$DRY_RUN" = true ]; then
+  echo "=== DRY RUN — would add to CHANGELOG.md ==="
+  echo -e "$ENTRY"
+  exit 0
+fi
+
+# Prepend to CHANGELOG.md
+if [ -f "$CHANGELOG" ]; then
+  TEMP=$(mktemp)
+  echo -e "$ENTRY" > "$TEMP"
+  cat "$CHANGELOG" >> "$TEMP"
+  mv "$TEMP" "$CHANGELOG"
+else
+  echo -e "# Changelog\n\nAll notable changes to this project will be documented in this file.\n\nCategories: 🚀 **Improvements** | 🐛 **Bug Fixes** | 🔒 **Security**\n\n---\n\n$ENTRY" > "$CHANGELOG"
+fi
+
+echo "✅ CHANGELOG.md updated (version: $VERSION)"

package/scripts/validate-skills.mjs

@@ -1,6 +1,20 @@
 #!/usr/bin/env node
 /**
- * Ensures each skill folder under skills/ has SKILL.md with a title line.
+ * Validates skills under skills/.
+ *
+ * Always-required (errors, fail build):
+ *   - SKILL.md exists with H1 title and YAML frontmatter (`name`, `description`)
+ *
+ * Opt-in v2 rules (errors only when frontmatter `compressed: true`):
+ *   - `token_budget` integer in [100, 6000]
+ *   - `## TL;DR` section present, ≤8 non-empty lines (≤5 recommended)
+ *   - SKILL.md ≤200 lines (warning only)
+ *
+ * Skills with `deprecated: true` are exempt from v2 rules.
+ *
+ * Migration: as skills are refactored to the new template
+ * (skills/_shared/SKILL_TEMPLATE.md), set `compressed: true` to enforce
+ * v2 quality. Once all core skills are migrated, the opt-in becomes default.
  */
 import fs from 'fs';
 import path from 'path';
@@ -9,32 +23,115 @@ import { fileURLToPath } from 'url';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const root = path.join(__dirname, '..', 'skills');
 
-/** Directories under skills/ that are not standalone skills (assets, packs). */
 const SKIP_DIRS = new Set(['profiles', 'extensions', 'scripts']);
 
 let errors = 0;
+let warnings = 0;
+
+function parseFrontmatter(text) {
+  const m = text.match(/^---\n([\s\S]*?)\n---\n/);
+  if (!m) return null;
+  const out = {};
+  for (const line of m[1].split('\n')) {
+    const mm = line.match(/^([A-Za-z_][A-Za-z0-9_-]*)\s*:\s*(.*)$/);
+    if (!mm) continue;
+    let v = mm[2].trim();
+    if (v.startsWith('"') && v.endsWith('"')) v = v.slice(1, -1);
+    if (v === 'true') v = true;
+    else if (v === 'false') v = false;
+    else if (/^-?\d+$/.test(v)) v = parseInt(v, 10);
+    out[mm[1]] = v;
+  }
+  return out;
+}
+
+function extractTldr(text) {
+  const m = text.match(/^##\s+TL;DR\s*\n([\s\S]*?)(?=\n##\s|$)/m);
+  if (!m) return null;
+  return m[1].split('\n').filter((l) => l.trim().length > 0);
+}
+
 if (!fs.existsSync(root)) {
   console.error('No skills/ directory');
   process.exit(1);
 }
 
+let migratedCount = 0;
+let totalCount = 0;
+
 for (const name of fs.readdirSync(root, { withFileTypes: true })) {
   if (!name.isDirectory()) continue;
   if (name.name.startsWith('_') || name.name.startsWith('.')) continue;
   if (SKIP_DIRS.has(name.name)) continue;
+
   const md = path.join(root, name.name, 'SKILL.md');
   if (!fs.existsSync(md)) {
-    console.error(`Missing SKILL.md: ${name.name}`);
+    console.error(`✗ ${name.name}: missing SKILL.md`);
     errors++;
     continue;
   }
+  totalCount++;
+
   const text = fs.readFileSync(md, 'utf8');
+  const fm = parseFrontmatter(text);
+
   if (!/^#\s+\S/m.test(text)) {
-    console.error(`SKILL.md missing H1 title: ${name.name}`);
+    console.error(`✗ ${name.name}: missing H1 title`);
+    errors++;
+  }
+
+  if (!fm) {
+    console.error(`✗ ${name.name}: missing YAML frontmatter`);
+    errors++;
+    continue;
+  }
+  if (!fm.name) {
+    console.error(`✗ ${name.name}: frontmatter missing 'name'`);
+    errors++;
+  }
+  if (!fm.description) {
+    console.error(`✗ ${name.name}: frontmatter missing 'description'`);
     errors++;
   }
+
+  const isDeprecated = fm.deprecated === true;
+  const isCompressed = fm.compressed === true;
+
+  if (isCompressed && !isDeprecated) {
+    migratedCount++;
+
+    if (typeof fm.token_budget !== 'number') {
+      console.error(`✗ ${name.name}: compressed skill missing 'token_budget' (number)`);
+      errors++;
+    } else if (fm.token_budget < 100 || fm.token_budget > 6000) {
+      console.error(`✗ ${name.name}: token_budget ${fm.token_budget} out of range [100, 6000]`);
+      errors++;
+    }
+
+    const tldr = extractTldr(text);
+    if (!tldr) {
+      console.error(`✗ ${name.name}: compressed skill missing '## TL;DR' section`);
+      errors++;
+    } else {
+      if (tldr.length > 8) {
+        console.error(`✗ ${name.name}: TL;DR has ${tldr.length} non-empty lines (max 8)`);
+        errors++;
+      } else if (tldr.length > 5) {
+        console.warn(`⚠ ${name.name}: TL;DR has ${tldr.length} non-empty lines (recommend ≤5)`);
+        warnings++;
+      }
+    }
+
+    const totalLines = text.split('\n').length;
+    if (totalLines > 200) {
+      console.warn(`⚠ ${name.name}: SKILL.md is ${totalLines} lines (recommend ≤200)`);
+      warnings++;
+    }
+  }
 }
 
+console.log(`validate-skills: ${migratedCount}/${totalCount} skills migrated to v2 (compressed:true)`);
+if (warnings) console.warn(`validate-skills: ${warnings} warning(s)`);
 if (errors) {
   console.error(`validate-skills: ${errors} error(s)`);
   process.exit(1);

package/skills/_shared/SKILL_TEMPLATE.md

@@ -0,0 +1,62 @@
+---
+name: cm-<name>
+description: "<one-line trigger sentence: when to use this skill>"
+token_budget: 1500
+compressed: true
+deprecated: false
+---
+
+# cm-<name> — <short title>
+
+## TL;DR
+- **Use when**: <trigger condition, 1 line>
+- **Output**: <what artifact/state changes>
+- **Handoff**: reads `.cm/handoff/<prev>.json` (if any), writes `.cm/handoff/<this>.json` (if any)
+- **Chain**: typically follows `cm-<prev>`, precedes `cm-<next>`
+- **Budget**: 1500 tokens (loaded full only when needed)
+
+## When to Use
+<2-4 bullets describing concrete situations. Skip if TL;DR is sufficient.>
+
+## Adaptive Depth
+
+Read `.cm/project-tier.md` (written by `cm tier classify`) and pick a rendering depth:
+
+- **LITE / STANDARD** → stop after TL;DR. Skip "Full Protocol" unless the task explicitly requires deep instructions.
+- **PROFESSIONAL / ENTERPRISE** → load the full protocol below.
+
+If the tier file is absent, default to STANDARD.
+
+## Full Protocol
+<Detailed instructions, examples, rules. Agent loads this only when TL;DR is insufficient or tier ≥ PROFESSIONAL.>
+
+### Step 1: <name>
+<...>
+
+### Step 2: <name>
+<...>
+
+## Integration
+
+| After this skill... | Use skill |
+|---|---|
+| <situation> | `cm-<next>` |
+
+## Persona Dispatch (optional)
+
+For complex tasks, dispatch via persona subagents in `agents/`:
+
+| Need | Persona |
+|------|---------|
+| Clarify scope/intent | `pm` |
+| Design / trade-offs | `architect` |
+| Write code | `engineer` |
+| Independent review | `reviewer` |
+| Threat model / scan | `security` |
+
+## Anti-Patterns
+- ❌ <thing not to do>
+- ❌ <thing not to do>
+
+## The Bottom Line
+**<one-sentence rule>**